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(57) Abstract: A Baseline DVB-CPCM is presented in this proposal to provide a secure and interoperable content delivery and 
transferring apparatus. The proposed Baseline DVB-CPCM is a unit to be implemented in a compliant CPCM device, and it con- 
sists of five major modules to be used for end-to end solution and content transferring between devices. These modules are CPCM 
Manager, Tools Box, Rights Management Module, Message Router, and CAS-CPCM Converter. 
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DESCRIPTION 
APPARATUS OF A BASELINE DVB-CPCM 
TECHNICAL FIELD 

The present invention relates to content protection and copy management used 
in broadcasting, content distribution, Video-On-Demand, especially to such 
applications where the protected content is delivered, and transferred between 
devices which can consume the content and save the content in a storage in a 
secure manner. 

BACKGROUND ART 

Contents will be available easily to consumers as digital technology and media 
processing power become more and more advanced. Not like analogue media, 
digital media almost has unlimited number of copies with good quality. Thus as 
content owner, or content operator they will have much concern about the 
dangerous if content is not protected well. 

Digital TV (DTV) broadcasting has been widely deployed in the world. So far 
there is not much concern about the content protection and security. However 
as new generation DTV-STB (Set-Top-Box) that has local hard disk and digital 
interface like IEEE 1394, etc. is launched, content association, movie industries, 
and media owners are starting to worry about the content protection and copy 
management. Before having a complete and very secured DTV-STB, a secured 
content delivery and transferring mechanism, as well as a secured transmission 
channel, they would not allow to release contents to such applications. 
Therefore many parties in the world including standard bodies like MPEG, DVB, 
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TVAnytime, content companies, CE (Consumer Electronics) manufacturers, as 
well as security technology providers, etc., are gathering together to work on a 
both interoperable and secure end-to-end solution to the content protection and 
copy management in such application scenario. 

5 

Content distribution and video-on-demand is also becoming more and more 
demanding as multimedia data and contents can reach to anywhere and 
anytime. User is happy with the convenience and flexibility, and they can enjoy 
entertainment easily and efficiently. 

10 

On the other hand, content owners are trying to meet the customer's needs but 
at the same time they also worry about the illegal usage of their property: There 
is a balance between two sides. 

15 In MPEG standardisation group, people are working towards to standardise an 
IPMP (Intellectual Property Management and Protection) system that involves 
compliant terminal. All the terminals can play back a protected content that is 
encrypted and protected by following the same IPMP standard, no matter what 
kinds of IPMP tools they use. 

20 

DVB consortium has also issued Call for Proposal for CPCM (Content 
Protection and Copy Management), to mainly focus on content delivery from 
operator to receiver and content transferring from one DVB-CPCM device to 
another in a both secure and interoperable manner. 

25 

The current DVB receiver as a DVB device cannot fulfil the both secure and 
interoperable requirement, especially for content transferring between DVB 
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receiver and other storage devices like PVR, etc., which has not addressed 
before. 

Basically the prior art for an existing DVB receiver is shown in Figure 1, to 
5 indicate how a content is delivered to DVB receiver in a secure but private way. 

Related invention is disclosed in Japanese Patent Application Nos. 2001- 
265908 and 2001-058236 which are filed by the present applicant 

10 To design an interoperable and secure device to be used in content delivery or 
transmission in a secure manner; 

To design an interoperable and secure device to be used in content transferring 
between such devices in a secure manner; 

15 

In the above-mentioned cases, content is protected against illegal use of the 
property and granted usage is properly managed and carried from one device to 
another within authorised domain. 

20 DISCLOSURE OF INVENTION 

The device according to the present invention has the following elements. 

A means for using a standardized Baseline DVB-CPCM unit to be implemented 
in a compliant CPCM Device; 

25 

A means for using sub modules of the Baseline DVB-CPCM, as well as their 
functions and behaviours; 
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A means for using a set of messages for content transferring, tool transferring, 
mutual authentication between compliant CPCM Devices, as well as interfacing 
with proprietary CPCM tools (plug-ins); 

5 

A means for using a set of identifiers for content management and domain 
management; 

A means for using CPCM Information and their sub information which is carried 
10 in a content, as well as a set of syntaxes and their semantics for such 
information to indicate the format of a protected content where protection 
information and content usage information are embedded. It is used by content 
provider or service operator as the standard mean to wrap up content with other 
information, and at the same time it is used by CPCM Device makers as the 
1 5 specification to build their compliant CPCM Devices. 

A means for using a unified and generic XML based schema to be able to 
express various kinds of usage rights and rules by different parties. 

20 According to a device of the present invention, the invention of Baseline DVB- 
CPCM solves the problem of protecting digital content from broadcasting, 
copying and/or transferring, and it provides good interoperability. 

25 The invented Baseline DVB-CPCM is the unit to be implemented in a compliant 
CPCM device, and it consists of five modules to realise most of the functions 
requested by security and interoperability. 
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CPCM Control Information and CPCM Stream are defined in to provide 
specification for both operator and manufacturer to follow to have world-wide 
interoperability, it includes CPCM Tool List, Rights Holder, and Tool Container. 
5 In specifying a compliant CPCM Device, a Baseline DVB-CPCM is invented 
including CPCM Manager, Tools Box, Rights Management, Message Router, 
and CAS-CPCM converter, to fulfil most of the functions for content protection 
and copy management 

10 Messaging interface and several messages are defined here for content or tool 
transferring between CPCM Devices, as well as for interfacing with proprietary 
CPCM plug-ins. 

XML structured or binary rights language can be included in CPCM Rights Holder to 
1 5 provide usage rules associated with each content, program or even elementary streams. 

BRIEF DESCRIPTION OF DRAWINGS 

Figure 1 shows the prior art of an Existing DVB-STB to Receive Protected 
Content by using Different CA Systems. 

20 

Figure 2 shows the invented DVB CPCM STB with End to End Solution. 

Figure 3 shows the Structure of CPCM protected content - MPEG2 system. 

25 Figure 4 shows Illustration of the Function of Rights Management used for End 
to End Solution in the Broadcasting Case. 
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Figure 5 shows Illustration of the Function of Rights Management used for End 
to End Solution in the content distribution case; 

Figure 6 shows Illustration of the Tool Retrieving Function of CPCM Manager. 

5 

Figure 7 shows Content Transmission between CPCM Devices. 
BEST MODE FOR CARRYING OUT THE INVENTION 

In the present invention, a parameter named "authorized domain" is newly 
10 provided, which specifies one or more local networks. Only 
reproduction/recording devices within the local network specified by the 
authorized domain can be authorized to perform one of reproduction and copy 
of CPCM (content protection and copy management) protected content so that 
the content can be fully secured in transferring between the devices within the 
15 network. 

The authorized domain is defined when a user makes a contract of content 
subscription with a content provider. Terms of the contract may be varied 
according to characteristics of the local network such as numbers and/or types 
20 of the devices within the local network assigned the same domain. 

For example, the authorized domain can be set by adopting a part of an IP 
address of the device within the local network. More specifically, in the case of 
the device with an IP address "dvdplayer1.seno.drl.mei.co.jp", the authorized 
25 domain may be "seno.drl.mei.co.jp". Then, all the devices having IP address 
"seno.drl.mei.co.jp" can be authorized to perform one of reproduction and copy 
of the contracted content Note that a domain specifies a logical unit of a 
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connection between the devices, which are not necessary in the form of a 
network. 

The basic structure of the invention is first explained. 

5 

(1) On the content provider or operator side in a CPCM environment: 

1 . Content is encoded using existing coding technology like MPEG-2 or 
MPEG-4, and encrypted using existing and defined encryption tools like DES or 
10 AES. Watermarks for copy control maybe embedded in the content before the 
encoding. The encryption key is encrypted again using pre-defined encryption 
tool, to result in an encrypted encryption key and the license key that is used to 
encrypt the encryption key. 

15 2. At the same time, the ContentID is generated. 

3 . CPCM Tools List indicated by ToollD is also formed based on what tool is 
used to protecting the content. 

20 4 . CPCM Rights Holder contains usage rights and rules specified by content 
owner. These usage rights and rules can be made specific to each piece of 
content (by using of ContentID), or each program under one content (by using 
of programNumber in MPEG2 system), or even each elementary stream under 
one program (by using elementary_PID in MPEG2 system). The above- 

25 mentioned license key can be carried in CPCM Rights Holder, or it can be 
delivered to CPCM devices via some secure means, a return channel or smart 
card. 
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5 . CPCM Control Graph is created if necessary according to the detail 
protection and usage rules applied to different control point; 

6 . CPCM Tool Container is formed by carrying necessary CPCM Tool in a 
protected format; 

7 . CPCM Stream is created to hold the above-mentioned encrypted 
encryption key and any other control information for protection, such as time 
stamps, tool configuration messages, etc. 

All the above CPCM information is carried in PSI in MPEG-2 system standard, 
and it is called CPCM Control Information. 

(2) On the content receiver side in the same CPCM environment: 

A protected content is delivered to a compliant CPCM Device, and Baseline 
DVB-CPCM unit will function by activating its sub modules: 

1 . Rights Management module will retrieve CPCM Rights Holder information. 
Usage rules and states associated with the content are parsed. These include 
usage rights of each program, elementary stream, copy information on whether 
or not the content (or a program) can be transferred between CPCM devices in 
the same authorized domain. If the license key is carried jn CPCM Rights 
Holder, it is also retrieved after the Rights Management module makes sure that 
this device has the right to access a particular content or program. If not, the 
license key is obtained elsewhere through a secure means, maybe a smart card. 
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2 . CPCM Manager module will retrieve CPCM Tool List and call up the tool 
indicated by ToollD in the list if there is such tool in Tools Box of Baseline DVB- 
CPCM. If there is no such tool in the case of a new tool or upgraded tool, 

5 missing tool downloading or retrieving will be conducted in three ways: sending 
ToolRequest to another CPCM Device; retrieving tools from the content (if there 
is tools carried in Tool Container Descriptor); remotely retrieving missing tool 
from a URL site. The newly obtained tool will be used as proprietary CPCM 
tools (plug-ins). 

10 

3 . In the case of playback only, the license key stored in buffer of Baseline 
DVB-CPCM will be called to decrypt the encrypted encryption key in the CPCM 
Stream. The reconstructed key will be used to decrypt the encrypted content 
one unit by one unit synchronously, to play back the protected content without 

15 content storing. 

4 . In the case of storing content on the top of playback, Usage rules and 
rights carried in the CPCM Rights Holder will be further retrieved and verified to 
see whether there is copy right for this program or content. In the case of 

20 broadcasting, program number like ProgramNumber is used to identify the 
usage right applied to which program, while in the case of content distribution, 
ContentID will be used to identify the usage right applied to which content. 

After usage rule verification performed, the protected content will be played 
25 back in the same way as indicated in the above-mentioned playback case. At 
the same time the encrypted content will be saved in the storage of a CPCM 
device, together with CPCM information (CPCM Tool List, CPCM Rights Holder, 



BNSOOCID: < WO_030391 65A2J_> 



WO 03/039155 



10 



PCT/JP02/11126 



CPCM Control Graph, CPCM Tool Container, and CPCM Stream where the 
encryption key is not encrypted). 

(3) Protected content transferring between two compliant CPCM Devices: 

5 

It is assumed that the protected content stored in CPCM Device A, together with 
CPCM Control Information. CPCM Device B is owned by the same user and 
considered to be in the same authorized domain. 

10 In the case of content distribution, the same CPCM_DomainlD corresponding to 
one registered user has been issued as a certificate and registered to all user's 
CPCM devices when he makes subscription via a return channel, smart card, or 
other means. 

15 This CPCMJDomainID as a certificate is securely transmitted, delivered, and 
registered into user's CPCM devices, or it is registered into user's CPCM 
devices via a plug-in smart card. This CPCMJDomainlD registered in Baseline 
DVB-CPCM of user's CPCM devices is used as Hardware's identifier or 
authorized domain identifier. 

20 

A password assigned by the service operator may be used in this registration 
process. All the bill for pay-per-view or content purchase will be charged to 
users based on their own CPCMJDomainID and the password. All his 
registered CPCM devices are considered to be in the authorized domain with 
25 the same certificate of CPCMJDomainID. 

Within the same domain, each of the CPCM Devices is also assigned a 
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CPCM_DevicelD to Identify itself and to be used as address for messages 
sending and receiving between two CPCM devices. Each CPCM device will 
also have a key generation module to generate a pair of public key and private 
key to use to encrypt and decrypt the encryption keys in CPCM Stream. 

5 

When CPCM Device B wants to obtain a protected content/program which is 
stored in the CPCM Device A, it will send a ContentRequest message to the 
device A, together with: 

a ) the ContentlD/ProgramNumber of the requested content/program; 
10 b) CPCM_DomainlD in the device B; 

c ) the public key — PublicKey on-line generated by (or previously embedded 
in) Baseline DVB-CPCM of the device B; 

d) the CPCM_DevicelD of the device B; 

15 The Baseline DVB-CPCM of device A receives the ContentRequest messages 
with the CPCM_DomainlD and the PublicKey, and it will verify: 

a ) whether device B is in the authorized domain. It is done by either doing a 
mutual authentication with Device B using certificates through mutual 

20 . authentication messages, or simply by checking the received CPCM_DomainlD 
against with its own CPCM_DomainlD; 

b ) whether there is such content/program with the ContentlD/ProgramNumber 
(programNumber is used in broadcasting case); 

c ) Whether there is such copy right for the requested content/program by 
25 calling the Rights Management Module to check the usage rules carried in 

CPCM Rights Holder. 

d ) If the above-mentioned three steps are passed through, the encryption key 



BNSDOCIO. <WO_O3039156A2_l_> 



WO 03/039155 



PCT/JP02/11126 



12 

carried by CPCM Stream which is stored in the device A, is encrypted by the 
received PublicKey and re-form a CPCM Stream attached to the protected 
content; 

e ) Finally the requested content will be transferred from the device A to the 
5 device B together with the CPCM information where some CPCM information 

may be changed; 

f ) If Copy right is Copy Once in the CPCM Rights Holder, then Copy Once will 
be changed into Copy No More; 

g) If the copy right information is carried in video embedded by watermarking, 
10 then a watermarking extracting tool will be called up from Tools Box to extract 

the copy right information. In this case if the copy right is Copy Once, then a 
watermarking embedding tool will be called up to embed Copy No More to the 
same video content; 

15 (4) CPCM tool transferring between two compliant CPCM Devices: 

It is assumed that CPCM Tools are stored in the module of Tools Box of 
Baseline DVB-CPCM in the CPCM Device A. 

20 CPCM Device B receives a protected content and retrieves CPCM Tool ListBut 
when it is found that the tool required with ToollD is missing or cannot be found 
from the Tools Box of Baseline DVB-CPCM in the device B, the device B will 
send ToolRequest messages to the device A to request such tool, and the 
messages include: 

25 

a) the CPCM_DomainlD of the device B; 

b) the ToollD of the requested tool; 
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c) the CPCM_DevicelD of the device B; 

CPCM Rights Management module in the device A receives the ToolRequest 
messages with the CPCM_DomainlD and the ToollD, and it will verify: 

a ) whether device B is in the authorized domain. It is done by either doing a 
mutual authentication with Device B using certificates through mutual 
authentication messages, or simply by checking the received CPCMJDomainID 
against with its own CPCM_DomainlD; 

b ) whether there is such tool with the ToollD, by looking up the tool table list 
stored in the local memory such as RAM which is inside the Baseline DVB- 
CPCM of the device A; 

c ) whether it is allowed for the tool to be transferred to another device even in 
the authorized domain, according to the transferring status for the requested 
tool; 

d) If the above-mentioned three steps are passed through, the requested tool 
will be transferred from the device A to the device B, together with its 
transferring status; 

Embodiment 

A preferred embodiment of the invention will be described below with reference 
to the drawings. 

Figure 1 shows the prior art for the current typical DTV system, and DVB-STB 
with a private CA system is shown as the receiver here as an example. 
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In unit 1.0 Content Owner Issues content to different operators with certain 
basic and common usage rules for the content; 

In unit 1.1 Operator A creates protected content using its tool and format 
although MPEG-2 standard is used here for audio, video and system encoding. 
The format of usage rules, the protection mechanism including protection tools 
used here, is based on a proprietary specification A. So a CA module in unit 1.2 
based on such specification B has to be used to attach to the DVB-STB 1 , in 
order to be able to receive and interpret in unit 1.3, and consume the protected 
content in unit 1.4. 

The same way is applied to Operator B and DVB-STB 2. 

In unit 1.5 Operator B creates protected content using its tool and format 
although MPEG-2 standard is used here for audio, video and system encoding. 
The format of usage rules, the protection mechanism including protection tools 
used here, is based on a proprietary specification B. So a CA module in unit 1 .6 
based on such specification B has to be used to attach to the DVB-STB 2, in 
order to be able to receive and interpret in unit 1 .7, and consume the protected 
content in unit 1.8. 

The same way is applied to Operator C and DVB-STB 3. 

In unit 1.9 Operator B creates protected content using its tool and format 
although MPEG-2 standard is used here for audio, video and system encoding. 
The format of usage rules, the protection mechanism including protection tools 
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used here, is based on a proprietary specification C. So a CA module in unit 
1.10 based on such specification C has to be used to attach to the DVB-STB 3, 
in order to be able to receive and interpret in unit 1.11, and consume the 
protected content in unit 1.12. 

It is shown from the above mentioned situation, if DVB-STB 1 wants to receive 
and consume contents delivered by Operator B and C besides Operator A, user 
of DVB-STB 1 has to buy more than one CA systems which may cause much 
more than what user is not willing to pay. 

On the other hand it is also not possible for such DVB-STB to fulfil secure 
content storing and secure content transferring between different devices by 
carrying the same usage rules. 

Furthermore there is no any compatibility among all the existing CA systems, so 
that the cost for having the same DVB-STB be able to receive and consume 
contents from as many as operators would be very large to consumers. 

As new generation DVB-STB would have local storage embedded in the STB to 
not only receive but also store received content. Besides that, content 
transferring between such devices including Personal Video Recorder (PVR) 
would become demanding. So it is necessary to define a new DVB device to 
realise both interoperable and secure content delivery and transferring from end 
to end and also between such devices. 



End-to-End Solution 
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Based on this invention, a future compliant DVB CPCM STB will contain a 
Baseline DVB-CPCM Module that is pre-implemented or embedded in a DVB 
STB, shown as in Figure 2. 

5 An end to end solution based on DVB CPCM STB with the invented Baseline 
DVB-CPCM is illustrated in Figure 2. The Baseline DVB-CPCM is specified, 
including its sub-function modules, CPCM Manager, Tools Box, Rights 
Management Module (Usage States & Rules Parser), CAS-CPCM Converter 
between a private CAS (ECM & EMM) and CPCM Usage States & Rules, as 

1 0 well as Message Router which transmits all necessary messages. 

Figure 3, the structure of MPEG-2 content protected by CPCM system is shown. 

As shown in Figure 3 a CPCM protected content will contain CPCM Control 
15 Information including CPCM Tool List, CPCM Right Holder and CPCM Tool 
Container, as well as CPCM Stream. CPCM Control Information is carried in 
PSI (Program Service Information) in MPEG-2 system, while CPCM Stream is 
carried as a specific elementary stream. 

20 There are two possible Use Cases for the above DVB CPCM STB. 

1 ) In the case content is protected and managed by the standardized DVB 
CPCM system: 

25 Content will be encoded and encrypted with certain usage rules, and 
distributed/transmitted with other usage information that depends on user 
subscription, to DVB CPCM STB. 



BNSOOCID: <WO_03039166A4J_> 



WO 03/039155 



PCT/JP02/11126 



17 



Here since all elements, like encryption tool, and usage rules encoding, are 
based on the CPCM system, so Baseline DVB-CPCM, which is embedded in 
the STB will call up the decryption tool in the Tools Box, parse the usage rules 
5 by Rights Management Module, and then process the protected content. 

The encryption key is encrypted again and carried in a CPCM Stream. The key 
used to encrypt the encryption key, i.e., license key is either carried in Rights 
Holder, or made known to the DVB CPCM STB in some secure way, either via 
1 0 smart card, or via a return channel like modem line. 

Rights Management module in the invented Baseline DVB-CPCM of a 
complaint CPCM device will act for the following functions, as shown in Figures 
4 and 5. 

15 

In the Figure 4 for the case of broadcasting, the protected content with its 
CPCM information is passed to Rights Management (RM) module in the unit 1, 
and CPCM Rights Holder will be retrieved in this module. Usage Rules and 
possibly the license key are carried in the CPCM Rights Holder. 

20 

In the first step in the unit 2 as shown in Figure 4, RM checks the content 
carried in CPCM Rights Holder against the CPCM_DomainlD which user is 
entitled to receive and has registered into user's CPCM device, to verify 
whether this device is eligible to consume the content. 

25 

• If the above result is negative, then the RM will generate an output message 
saying: you are not authorized, as shown in unit 3. 
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• If the above result is positive, then the RM will retrieves the license Key either 
from Rights Holder or smart card in unit 4 to be ready for decrypting the 
encrypted encryption key which is carried in the CPCM Stream. 

In the next step, the RM will check user's request or preference between Play or 
Play & Copy in unit 5. 

• In the case of "Play only" requested by user, the retrieved License Key in unit 
4 will be passed to unit 8 for decrypting the encrypted encryption key. The 
following step is to de-scramble the protected content in unit 9 and playback the 
content in unit 10. 

• In the case of Play & Copy request by user, the RM will retrieve the Usage 
Rules in unit 6 to verify whether there is copy right to save the current content 
(or program in broadcasting case) in the storage in the complaint CPCM device. 

• If the above result is negative, then the RM will generate an output 
message saying: Copy/Move is prohibited, as shown in unit 7. 

• If the above result is positive, then the retrieved License Key in unit 4 will 
be passed to unit 8 for decrypting the encrypted encryption key. The following 
step is to de-scramble the protected content in unit 9 and playback the content 
in unit 10. At the same time, in unit 11 the reconstructed encryption key is 
saved in Rights Management module for later use. The protected content is 
stored in local storage in the CPCM device in unit 12. 
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In the Figure 5 for the case of content distribution, the protected content with its 
CPCM information is passed to Rights Management (RM) module in the unit 1, 
and CPCM Rights Holder will be retrieved in this module. Usage Rules and 
possibly the license key are earned in the CPCM Rights Holder. 

5 

In the first step in the unit 2 as shown in Figure 5, RM checks CPCM_DomianlD 
carried in CPCM Rights Holder against the CPCM_DomianlD which has 
registered into user's CPCM device, to verify whether this device is in the 
Authorized Domain and is eligible to consume the content. 
10 • 

• If the above result is negative, then the RM will generate an output message 
saying: you are not in authorized domain, as shown in unit 3. 

• If the above result is positive, then the RM will retrieves the license Key either 
15 from Rights Holder or smart card in unit 4 to be ready for decrypting the 

encrypted encryption key which is carried in the CPCM Stream. 

In the next step, the RM will check user's request or preference between Play or 
Play & Copy in unit 5. 

20 

• In the case of "Play only" requested by user, the retrieved License Key. in unit 
4 will be passed to unit 8 for decrypting the encrypted encryption key. The 
following step is to de-scramble the protected content in unit 9 and playback the 
content in unit 10. 

25 

• In the case of Play & Copy request by user, the RM will retrieve the Usage 
Rules in unit 6 to verify whether there is copy right to save the current content 
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(or program In broadcasting case) in the storage in the complaint CPCM device. 

• If the above result is negative, then the RM will generate an output 
message saying: Copy/Move is prohibited, as shown in unit 7. 

5 

• If the above result is positive, then the retrieved License Key in unit 4 will 
be passed to unit 8 for decrypting the encrypted encryption key. The following 
step is to de-scramble the protected content in unit 9 and playback the content 
in unit 10. At the same time, in unit 11 the reconstructed encryption key is 

10 saved in Rights Management module for later use. The protected content is 
stored in local storage in the CPCM device in unit 12. 

In Figure 6, it is shown how CPCM Manager retrieves a tool, and obtains a 
missing tool in different ways. 

15 

As in Figure 6, CPCM Tool List is passed to CPCM Manager module in unit 1 to 
retrieve the requested tool. In unit 2 Tools Box will be looked up to search for 
the requested tool. If the requested tool exists in the Tools Box, the tool will be 
activated for functioning in unit 3. Otherwise the CPCM Tool Container will be 
20 checked if it exists, shown in unit 4. 

If the requested tool can be found in unit 4, then the tool will be retrieved from 
the CPCM Tool Container and saved in the Tools Box in unit 5. Otherwise the 
requested tool will be obtained from another CPCM device by sending a request 
25 message in unit 6. 

If the tool request is accepted, then the tool will be transferred over and saved 
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in the Tools Box in unit 7. Otherwise the reply message will tell the reasons for 
the failure in unit 8. 

In unit 9 a CPCM Plug-in module will be checked to see if there is such 
requested tool to use. If no, the requested tool has to be retrieved from remote 
side via a return channel, URL, or other means in unit 11. 

2 ) In the case content is protected and managed by a private CAS system: 

Content will be encrypted by control word in an ECM, and transmitted with their 
own format of EMM, to DVB CPCM STB. 

Since ECM and EMM are based on the private format of the CAS system, so a 
corresponding private CAS module is required in the DVB STB to decrypt and 
process the protected content 

As shown in Figure 2, a CPCM plug-in module (CAS-CPCM converter), such as 
Smart Card with DVB compliant Common Interface (CI), is provided by the CA 
vendor to receive and playback such content 

Communications between a CAS-CPCM converter module and the Baseline 
DVB-CPCM module in the compliant CPCM device is realized across a DVB 
compliant Common Interface (CI). CAS is Conditional Access System. 

Next, mapping between CA system and Baseline DVB-CPCM for Storage is 
described. 
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In the case if the content is just for playback, there is no necessity to conduct 
mapping. However, in the case if the content is granted to store in the DVB 
CPCM STB for future transferring in the authoring domain, a CAS-CPCM 
converter module with DVB compliant Common Interface (CI) is required to map 
the Usage Rules used in the private CA system to CPCM format for the Usage 
Rules. Besides mapping usage rules, the content also needs to be decrypted 
by the private CA system, and then be encrypted again by the Baseline DVB- 
CPCM, to store in the STB in an encrypted form together with their CPCM 
Control information (CPCM Tool List, CPCM Rights Holder, etc) as well as 
CPCM Stream to hold the encryption key and other relevant information. 

The following table shows the Functions of Each Modules Illustrated in Figure 2 
for the end to end solution. 



Table 1 : Functions of Each Modules Illustrated in Figure 1 



Module Name 


Functions 


Operator/Server Side 




Rights Authoring Tool 


Editing of XML based Usage Rules and converting it 
into Binary format 


Content Authoring 
Tool 


Encoding and editing the content 


Watermarking Tool 


Embedding watermark on video or audio 


MPEG-2 Encoder 


Creating MPEG-2 compliant Audio/Video/System 
streams 


CPCM Control 
Information Encoder 


Creating CPCM Tool List, CPCM Rights Holder 
Descriptor, CPCM Tool Container, CPCM Control 
Graph 
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CPCM Tools 


Encrypting a stream, hashing of CPCM Control 
Information, etc. 


Usage States & Rules 
Encoder 


Selecting and encoding usage rules based on 
user's subscription and DomainID, etc. 


CPCM Stream 
Generator 


Encrypting the encryption key to generate CPCM 
Stream. Other information that a CPCM tool needs 
can also be put in CPCM stream with proper 
timestamp. 


Private CAS 


Operation of any proprietary CA system. 


Receiver/Client Side 




Baseline DVB-CPCM 


A Standardized Unit consisting of several sub- 
modules that does CPCM functions in a compliant 
CPCM Device 


CPCM Manager 


Managing tools box, parsing tool list, retrieving 
CPCM tools; Content and Domain management; 


Tools Box 


Holding all existing CPCM Tools; 
Performing CPCM Tools function; 


Rights Management 


Parsing Binary (XML optional) based Usage Rules 
carried in Rights Holder Descriptor, and controls the 
consumption or copy of content. 


Message Router 


A conceptual entity within Baseline DVB-CPCM that 
provides Messaging Interface between proprietary 
ioois or conrjpiiani urLM Devices. 


CAS-CPCM converter 


Conversion of Proprietary CAS Usage Rules into 
CPCM Usage Rules (CPCM Rights Holder 
Descriptor) across DVB Common Interface (CI), Re- 
Encryption, forming of CPCM Stream. 
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Next, Baseline DVB-CPCM used in Transmission between CPCM Devices is 
described. 

5 Transmission between two compliant CPCM devices is realized through a 
standardized Baseline DVB-CPCM module Message Router that is pre- 
implemented in all CPCM devices. The communication is through messaging 
interface to provide interoperability, as shown in Figure 7. 

10 Messages via Message Router (MR) provide the following transmissions 
between CPCM devices: 

• Content transferring from one to another; 

• CPCM Tool transferring from one to another, 

15 

The following identifications are defined to use for content management and 
user database management during content transferring and rights 
authentication. 

20 Table 2 Parameters defined for Content Transferring in Authorized Domain 



IDs defined for Content 
Management and 
Authorized Domain or 
User Database 
Management 


Definition and Usage 


ContentID 

• 


An identifier assigned to each content for 
content management 



BNSDOCID: <WO_03039155A2J_> 



WO 03/039155 PCT/JP02/11126 

25 



CPCM_DevicelD 


An identifier assigned to each CPCM 
compatible device to use as address for 
sending ana receiving messages. 


CPCM_J)omainlD 


An identifier may obtain from Operator upon 
user registration and used for several CPCM 
Devices in the same Authorized Domain. 



It is assumed that an encrypted content is stored in CPCM Device A with CPCM 
Rights Holder containing its Usage Rules and the encryption key. 

5 l ) Content Request Message Sending from CPCM Device B to CPCM Device 
A 

Now CPCM Device B sends message via Message Router to request certain 
content with the ContentlD/ProgramNumber or possible elementary PIDs, as 
10 well as its CPCM_DomainlD. Besides these parameters, CPCM nevira R also 
generates one pair of keys and sends the PublicKey together with the above 
parameters to CPCM navies a shown as in table 3. 



Table 3 Content Request Messages 



Messages 


Length 


Notes 


ContentlD/ProgramNumber 


4 bytes 




CPCMJDomainlD 


4 bytes 




PublicKey 


16 bytes 





15 

2) Verification - Mutual Authentication 
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Then. to 6 CPCM Device A receives this message with all the parameters, 
searches ContentlD/ProgramNumber in the storage, and verifies 
CPCMJDomianID against its CPCM_DomianlD by CPCM Rights Management 
module in the Baseline DVB-CPCM. At the same time it checks the usage rules 
for the requested content/program, and finally grants copy or move right by 
sending a reply message to CPCM_Device_B. 

The reply message format is shown in Table 4, including error reporting. 
Table 4 Response Message for Content Request 



Reply Message & 
Codes 


Error Reporting 


Note 


No 


00 


No such content 




No 


01 


You are not in the authorized 
domain. 




No 


10 


Prohibit in Copy/Move mode 




Yes 


11 


Transferring is allowed 





3 ) On-line Encryption for the Encryption Key to create CPCM Stream 



15 



After finishing the above Rights Authentication, the encryption key stored 
together with the content in CPCM Device A, will be encrypted by the PublicKey 
received from CPCM rwira r to form a CPCM Stream. 



20 



4 ) Content Transferring from CPCM Devira a, to CPCM Device B 
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Now the requested content, together with Usage Rules (may changed) and the 
formed CPCM Stream, is transferred from CPC'M Device A to CPCM Device B 
securely via secured channel. 

5 ) Tool Transferring Between CPCM Device A and CPCM Device B 

CPCM Manager in CPCM Device B retrieves CPCM Control Information carried 
in PSI of MPEG-2 TS stream to obtain CPCM Tool List CPCM Manager 
checks the CPCM Tool List against with Tools Box in CPCM Device B T and 
cannot find the Tool indicated by ToollD. This may happen for the case where a 
new or upgraded CPCM Tool is used but the CPCM Device B does not 
implement. 

In this case CPCM Device B has three ways to obtain the missing CPCM Tool. 

a ) CPCM Device B sends Tool Request Message to CPCM Device A via 
Message Router, to request the Tool with the ToollD. At the same time it also 
sends its CPCM_DomainlD to CPCM Device A. The Tool Request Messages 
format is shown as in Table 5. 



Table 5 Tool Request Message Format 



Tool Request Message 


Length 


Note 


ToollD 


2 bytes 




CPCM_DomainlD 


4 bytes 





CPCM Device A receives the Tool Request Message, it may choose to do a 
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mutual authentication with Device B, and checks Tools Box with the Tool ID for 
the transferring permission status as shown in Table 6. 

Table 6 Tool Description in a Tools Box of CPCM Device 

5 



ToollD 


Num 
ber 


Function 


Source 


Status for 
Transferring 


00000001 


1 


Encryptionl 


Pre-implemented 


No 


00000002 


2 


Encryption2 


Pre-implemented 


No 


00000004 


4 


Encryption3 


Pre-implemented 


Yes 


00000006 


6 


Digital Sign 


Pre-implemented 


Yes 


000000010 


10 


Watermarking 
Embedding 


Pre-implemented 


No 


000000011 


11 


Watermarking 
Embedding 


Pre-implemented 


Yes 


000000012 


12 


Watermarking 
Detection 


Pre-implemented 


Yes 


000000020 


20 


Encryption20 


Loaded from CPCM 
Device 


Yes 


000000021 


21 


Encryption21 


Loaded from Content 
Stream 


Yes 


000000022 


22 


Encryption22 


Loaded from Plug-in 
module 


Yes 


000000023 


23 


Encryption23 


Loaded from Remote 
URL 


Yes 



If the status is yes, then CPCM Device A will send reply to CPCM Device B, 
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followed by sending the Tool with its associated description to CPCM Device B. 

b ) As shown in table 6, the missing tool also can be retrieved from the content 
stream carried in CPCM Tool Container; 

c ) As shown in table 6, the missing tool also can be obtained from another 
CPCM device; 

d ) As shown in table 6, the missing tool also can be retrieved from the remote 
URLs via a return channel or other means, which is out of this scope of the 
proposal; 



Next standardized components in the baseline DVB-CPCM is described. 

Those function modules used in a Baseline DVB-CPCM are listed in the Table 7 
15 below. 



Table 7 Function Module of Baseline DVB-CPCM 



Module Name 


Function Description 


Suggestion 


1. CPCM 
Manager 


Content Management 
Authorized Domain Management 
CPCM Control Information Retrieval 
(Tool List, CPCM Rights Holder, Tool) 


normative 


2. Tools Box 


Holding CPCM Tools and their 
Description 

Performing Tool's Function 


normative 


3. Rights 
Management 


Parsing Usage States & Rules (from 
Rights Holder Descriptor in CPCM 


normative 
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Control Information) and Storing them 
in a secure table with its ContentID 




4. Message 
Router 


Providing message interface to 
CPCM devices; Routing messages 
between proprietary CPCM tools 
(CPCM plug-ins) and device; Routing 
messages between CPCM devices. 


normative 


5. CAS-CPCM 
converter 


Transcoding Proprietary Usage Rules 
into CPCM Rights Holder Descriptor 
via CI; Controlling re-encryption using 
CPCM Tools in Tool Box for storage; 
Forming CPCM Stream. 


Optional for 
CPCM Devices; 
Used for 
backward 
Compatibility for 
private CAS; 


All Types of 
Message Format 







As shown in the Table 7, except the last module, all other five modules 
including their functions and behaviors, are needed to be normative and 
standardized to provide worldwide interoperability. 

5 

The message format from/to Message Routers between CPCM devices and 
proprietary CPCM tools (plug-ins) will be normative, and it is used for Content 
transferring, Tool transferring, mutual authentication between CPCM devices, 
as well as interfacing with CPCM plug-ins. 

10 

Interfaces between different modules inside a Baseline DVB-CPCM are not 
defined here, and it is implementation matter. Even the interface between 
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) 

Baseline DVB-CPCM and DVB STB is also not defined here as long £ 
Baseline DVB-CPCM fulfils all the functions that are defined here. 
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CLAIMS 

1 An apparatus of a Baseline DVB-CPCM (Digital Video Broadcasting for 
Content Protection and Copy Management) on sender side used in a complet. 
5 business environment, said apparatus distributing a CPCM protected content 
which content protection and copy management (CPCM) information for CPCM 
is attached to an encrypted content stream, said apparatus comprising: 

means for generating said encrypted content stream on the 
1 0 content owner side or operator side; 

means for generating said CPCM information which specifies an 
authorized domain which is authorized to perform one of reproduction and copy 
of said CPCM protected content; 



means for generating said CPCM protected content by attaching 
said CPCM information to said encrypted content stream; and 

means for delivering said CPCM protected content. 



20 



25 



2. An apparatus of a Baseline DVB-CPCM (Digital Video Broadcasting for 
Content Protection and Copy Management) on receiver side, comprising: 

means for receiving a CPCM protected content stream with its 
CPCM information and CPCM stream in CPCM device, said CPCM information 
specifying an authorized domain which is authorized to perform one of 
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reproduction and copy of said CPCM protected content; 



means for retrieving said CPCM information by said CPCM device 
to verify against pre-registered information in a Baseline DVB of said CPCM 
5 device to see whether said CPCM device is in an authorized domain; 

means for retrieving said CPCM information by said CPCM device 
to decrypt said encrypted content stream; 



10 



15 



25 



means for storing the content in a protected form in said CPCM 

device; and 



means for transferring the CPCM protected content from said 
CPCM device to another complaint CPCM device in a secure manner, after 
authenticating they are belong to the same authorized domain. 



3- An apparatus of a Baseline DVB-CPCM (Digital Video Broadcasting 

for Content Protection and Copy Management) used for end-to-end solution on 
20 sender side, comprising: 

means for generating a CPCM protected content stream on the 
content owner side or operator side; 



meanofor toning a Tool t_ist-a» CPCM Tool List to list all the tools usee 
to protecting said content by using a tool id code <c ^ asslgned ,„ ^ toQ , 
used for protecting said content Including such as encryption, watern,.*,^ 
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embedding, watermarking detecting, digital signi 



signing; 



means for creating CPCM Rights Holder by includino , 

means for creating a CPCM Control Graph to tell a orofcw- 
using differences in different position; °" 

means for creating a CPCM Tool Container to carry a CPCM tool ,„ 
certain CPCM Tool ID; too1 w " h 

means for forming a CPCM Stream to earn, • . 

« - stamp informauon whi^TIl "T^"' ^ 
of using said tods to p^ said ^ ^ * — **"»*» 

means for placing said CPCM information includino CPCM 

CPCM Rights Holder rpri< r- . , To °' Llst . 

ymo noraer, CPCM Control Graph CPruTnj/- , . 

CPCM Stream in the system layer inthe specif ZZ^T' ~ ~ 
•oge^er with said CPCM ^ ^J"*" - ^ •»«. 

means for assigning Content ID as cornet _ 
management on both operator side and user side; and 

means for delivering said CPCM protected content with its said CPCM 
information to CPCM device in a secure manner, said CPCM device belonging 
to sa,d authorized domain set by specifying CPCM_DomainlD as «cm 
Domain Identifier for authorized domain management 
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4. An apparatus of a Baseline DVB-CPCM (Digital Video Broadcasting 

for Content Protection and Copy Management) on receiver side, comprising: 

means for receiving a transmitted content by a CPCM device; 

means for authorizing said CPCM device to see whether it belongs to 
said authorized domain; 

means for retrieving said CPCM information included in said transmitted 
content by said CPCM device to obtain said protection information; 

means for verifying said usage rules of content by said CPCM device 
15 before taking action on user's request- 
means for decrypting said CPCM protected content using said retrieved 
CPCM information by calling up CPCM tools from said CPCM device or a 
proprietary CPCM Plug-in module if the requested CPCM tool is missing in said 
20 CPCM device; 

means for playing back said decrypted content to said user; and 

means for storing the CPCM protected content with its CPCM information 
25 in said CPCM device if said user has such request 
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5. An apparatus of a Baseline DVB-CPCM (Digital Video Broadcasting 
for Content Protection and Copy Management) used for content transferring 
between devices, comprising: 

means for setting a set of messages for content transferring with the data 
structure for several parameters used for content transferring; 

means for receiving a Content Request Message which is sent with 
several defined parameters by CPCM device B to request a content transferring 
from CPCM device A; 

means for verifying said several parameters received by said CPCM 
device A with the data pre-saved in said CPCM device A which is CPCM 
information specifying an authorized domain which is authorized to perform one 
of reproduction and copy of said CPCM protected content, to authenticate 
whether said CPCM device A and B are in the same domain, whether the 
requested content is in said CPCM device A, whether there is such copy/move 
rights attached to said content; 

means for sending a Content Response Message with several reply 
messages for different cases by said CPCM device to said CPCM device B, 
after the above said verification; and 

means for sending the requested content from said CPCM device A 
together with its CPCM information to said CPCM device B in a secure manner 
if the above said reply is positive. 
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6. An apparatus of a Baseline DVB-CPCM (Digital Video Broadcasting for 
Content Protection and Copy Management) used for CPCM tool transferring, 
comprising: 

5 

means for setting a set of messages for tool transferring with the data 
structure for several parameters used for tool transferring; 

means for sending a Tool Request Message with several defined 
10 parameters by CPCM device B to request a tool transferring from CPCM device 

A; 

means for verifying said several parameters received by said CPCM 
device A with the data pre-saved in said CPCM device A which is CPCM 
15 information specifying an authorized domain which is authorized to perform one 
of reproduction and copy of said CPCM protected content, to authenticate 
whether said CPCM device A and B are in the same domain, whether the 
requested tool is in said CPCM device A, whether the requested tool is allowed 
to transfer to another CPCM device; 

20 

means for sending a Tool Response Message with several reply 
messages for different cases by said CPCM device to said CPCM device B, 
after the above said verification; and 

25 means for sending the requested tool from said CPCM device A together 

with its status for transferring to said CPCM device B in a secure manner if the 
above said reply is positive, 
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wherein said CPMP device B retrieves said CPCM tool from other 
sources if the above said reply is negative. 

7. An apparatus of a Baseline DVB-CPCM (Digital Video Broadcasting for 
Content Protection and Copy Management) comprising: 

CPCM Manager module for the Baseline DVB-CPCM, to retrieve CPCM 
information that is placed in a system layer of a received content stream, and to 
process said CPCM Too List information and retrieve CPCM tools indicated by 
ToollD in said CPCM Tool List; 

Rights Management module for the Baseline DVB-CPCM, to retrieve 
said CPCM Rights Holder information for domain authentication, usage rules 
verification, and session key delivery if it is necessary; 

Tools Box module for the Baseline DVB-CPCM, to hold the possible 
defined CPCM tools or tools transferred and retrieved from other sources, and 
to activate the requested tool for performing its function; 

Message Router module for the Baseline DVB-CPCM, to use for 
message interface for sending and receiving message between CPCM devices, 
especially for communication between a compliant CPCM device and a 
proprietary CPCM Plug-in module; 
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CAS-CPCM Converter module for the Baseline DVB-CPCM, to use for 
converting usage rules set by an existing CA (Conditional System) system 
across the DVB compliant common interface (CI) for backward compatibility; 

5 Key Generator module for the Baseline DVB-CPCM, to generate a pair of 

keys for secure content transferring. 

8. An apparatus of a Baseline DVB-CPCM for generating a protected 
10 content stream on the content owner side or operator side in claim 3, further 

comprising: 

means for embedding copy control information in a content using 
said CPCM tools, such as watermarking, if there is such requirement; 

15 

means for encoding a content based on existing formats such as 
MPEG-2 using encoding tools, to form a content stream; 

means for encrypting said content stream using said CPCM tool to 
20 form a protected content. 

9. An apparatus of a Baseline DVB-CPCM for generating content 
protection and copy management (CPCM) control information and generating 

25 content protection and copy management (CPCM) stream in claim 1, 
comprising: 
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means for forming a Tool List as CPCM Tool List to list all the tools used 
to protecting said content by using a tool ID (identifier) to be assigned to any 
tool used for protecting said content including such as encryption, watermarking 
embedding, watermarking detecting, digital signing; 

means for creating CPCM Rights Holder by including usage rules, copy 
rights, etc. which is related to said content in a specific format; 

means for creating a CPCM Control Graph to tell a protection sequence 
using different tools in different position; 

means for creating a, CPCM Tool Container to carry a CPCM tool with 
certain CPCM Tool ID; 

means for forming a CPCM Stream to carry key information, control 
information, and time stamp information which are related to those information 
of using said tools to protect said content. 

10. An apparatus of a Baseline DVB-CPCM for sending a Content 

Request Message with several defined parameters by a CPCM device B to 
request a tool transferring from another CPCM device A in claim 5, further 
comprising means for sending a Content Request Message with the ContentID 
for the requested content, the CPCM_DomainlD for domain authentication, and 
the PublicKey for using to encrypt encryption key. 



WO 03/039155 



41 



PCT/JP02/11126 



11. An apparatus of a Baseline DVB-CPCM for sending a Tool Request 
Message with several defined parameters by a CPCM device B to request a 
tool transferring from another CPCM device A in claim 6, further comprising 
means for sending a Tool Request Message with the Tool ID for the requested 

5 tool, the CPCM_DomainlD for domain authentication, and the PublicKey for 
using to encrypt said tool. 

12. An apparatus of a Baseline DVB-CPCM for retrieving said CPCM tool 
10 from other sources if the above said reply is negative in claim 6, further 

comprising means for downloading from said other sources via a return channel, 
a defined URL, or other means in a secure manner. 

15 13. An apparatus of a Baseline DVB-CPCM for sending a Content 

Request Message and sending Tool Request Message in claims 5 or 6, further 
comprising: 

means for using a defined CPCM_DevicelD as CPCM Device Identifier 
20 for its CPCM devices within the same authorized domain; 

means for using said CPCM_DevicelD to send a message to a CPCM 
device that has said CPCMJDevicelD, and at the same time using another 
CPCM_DevicelD for the message sender's address. 
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